2020 CVE Vulnerabilities
21,141 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3412 | MEDIUM | 4.3 | 0.7% | Aug 17, 2020 | A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote a... |
| CVE-2020-3411 | HIGH | 7.5 | 2.2% | Aug 17, 2020 | A vulnerability in Cisco DNA Center software could allow an unauthenticated remote attacker access to sensitive informat... |
| CVE-2020-3363 | HIGH | 8.6 | 1.8% | Aug 17, 2020 | A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an u... |
| CVE-2020-3346 | MEDIUM | 6.1 | 0.8% | Aug 17, 2020 | A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Mana... |
| CVE-2020-7704 | CRITICAL | 9.8 | 2.7% | Aug 17, 2020 | The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor. |
| CVE-2020-24372 | HIGH | 7.5 | 1.5% | Aug 17, 2020 | LuaJIT through 2.1.0-beta3 has an out-of-bounds read in lj_err_run in lj_err.c. |
| CVE-2020-24371 | MEDIUM | 5.3 | 1.8% | Aug 17, 2020 | lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation... |
| CVE-2020-24370 | MEDIUM | 5.3 | 3.9% | Aug 17, 2020 | ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by get... |
| CVE-2020-24369 | HIGH | 7.5 | 1.7% | Aug 17, 2020 | ldebug.c in Lua 5.4.0 attempts to access debug information via the line hook of a stripped function, leading to a NULL p... |
| CVE-2020-24220 | HIGH | 8.8 | 2.4% | Aug 17, 2020 | ShopXO v1.8.1 has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands ... |
| CVE-2020-24208 | CRITICAL | 9.8 | 3.3% | Aug 17, 2020 | A SQL injection vulnerability in SourceCodester Online Shopping Alphaware 1.0 allows remote unauthenticated attackers to... |
| CVE-2020-9241 | HIGH | 7 | 0.5% | Aug 17, 2020 | Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233) have an improper authorizat... |
| CVE-2020-9237 | MEDIUM | 6.7 | 0.2% | Aug 17, 2020 | Huawei smartphone Taurus-AL00B with versions earlier than 10.1.0.126(C00E125R5P3) have a user after free vulnerability. ... |
| CVE-2020-9233 | CRITICAL | 9.1 | 0.8% | Aug 17, 2020 | FusionCompute 8.0.0 have an insufficient authentication vulnerability. An attacker may exploit the vulnerability to dele... |
| CVE-2020-8233 | HIGH | 8.8 | 4.4% | Aug 17, 2020 | A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to ... |
| CVE-2020-8232 | MEDIUM | 6.5 | 1.7% | Aug 17, 2020 | An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could ... |
| CVE-2020-8230 | MEDIUM | 5.5 | 0.4% | Aug 17, 2020 | A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in fo... |
| CVE-2020-8226 | MEDIUM | 5.8 | 1.0% | Aug 17, 2020 | A vulnerability exists in phpBB <v3.2.10 and <v3.3.1 which allowed remote image dimensions check to be used to SSRF. |
| CVE-2020-8212 | CRITICAL | 9.8 | 1.6% | Aug 17, 2020 | Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix Xe... |
| CVE-2020-8211 | CRITICAL | 9.8 | 1.5% | Aug 17, 2020 | Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix ... |
| CVE-2020-8210 | HIGH | 7.5 | 1.5% | Aug 17, 2020 | Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6... |
| CVE-2020-8209 | HIGH | 7.5 | 48.7% | Aug 17, 2020 | Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix Xe... |
| CVE-2020-8208 | MEDIUM | 6.1 | 1.0% | Aug 17, 2020 | Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix ... |
| CVE-2020-13122 | HIGH | 8.8 | 7.1% | Aug 17, 2020 | The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, i... |
| CVE-2020-9242 | HIGH | 8.8 | 1.3% | Aug 17, 2020 | FusionCompute 8.0.0 have a command injection vulnerability. The software does not sufficiently validate certain paramete... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now